Include multiple focus metavariables using set union semantics

INFOThis feature is using focus-metavariable, see focus-metavariable documentation for more information.

There are two ways in which you can include multiple focus metavariables:

Set union: Experimental feature described below in the section Set union. This feature returns the union of all matches of the specified metavariables.
Set intersection: Only matches the overlapping region of all the focused code. For more information, see Including more focus metavariables using set intersection semantics.

Set union

For example, there is a pattern that binds several metavariables. You want to produce matches focused on two or more of these metavariables. If you specify a list of metavariables under focus-metavariable, each focused metavariable matches code independently of the others.

    patterns:
      - pattern: foo($X, ..., $Y)
      - focus-metavariable: 
        - $X
        - $Y

This syntax enables Semgrep to match these metavariables regardless of their position in code. See the following example:

TIPAmong many use cases, the set union syntax allows you to simplify taint analysis rule writing. For example, see the following rule:

Display propagated value of metavariables Key: r2c-internal-project-depends-on

⌘I

Documentation Index

​Set union

Set union